sf

PA Toolkit is a collection of traffic analysis plugins to extend the functionality of Wireshark from a micro-analysis tool together with protocol dissector to the macro analyzer together with threat hunter. PA Toolkit contains plugins (both dissectors together with taps) roofing diverse scenarios for multiple protocols, including: WiFi (WiFi network summary, Detecting beacon, deauth floods etc.) HTTP (Listing all visited websites, downloaded files) HTTPS (Listing all websites opened on HTTPS) ARP (MAC-IP table, Detect MAC spoofing together with ARP poisoning) DNS (Listing DNS servers used together with DNS resolution, Detecting DNS Tunnels) The projection is nether active evolution together with to a greater extent than plugins volition hold out added inward almost future. This cloth was created piece working on "Traffic Analysis: TSHARK Unleashed" course. Those interested tin banking concern gibe the course of pedagogy here: https://www.pentesteracademy.com/co...

Androwarn is a tool whose principal aim is to reveal in addition to warn the user most potential malicious behaviours developped past times an Android application. The detection is performed amongst the static analysis of the application's Dalvik bytecode, represented equally Smali, amongst the androguard library. This analysis leads to the generation of a report, according to a technical exceptional degree chosen from the user. Features Structural in addition to information catamenia analysis of the bytecode targeting dissimilar malicious behaviours categories Telephony identifiers exfiltration : IMEI, IMSI, MCC, MNC, LAC, CID, operator's name... Device settings exfiltration : software version, usage statistics, organization settings, logs... Geolocation information leakage : GPS/WiFi geolocation... Connection interfaces information exfiltration : WiFi credentials, Bluetooth MAC adress... Telephony services abuse : premium SMS sending, telephone phone te...

Bashter is a tool for scanning a Web-based Application. Bashter is rattling suitable for doing Bug Bounty or Penentration Testing. It is designed similar a framework in addition to hence you lot tin easily add together a script for respect vulnerability. For Example You tin add together something script similar this: ${BASHTER_HOME}/parts/form/yourscript.bash ${WEB-FULLPATH} ${WEB-SOURCECODE} ${BASHTER_HOME}/parts/url/yourscript.bash ${WEB-FULLPATH} ${WEB-SOURCECODE} ${BASHTER_HOME}/parts/header/yourscript.bash ${WEB-FULLPATH} ${WEB-SOURCECODE} For the sample, you lot tin follow existing scripts. Disable Script You solely involve to alter the extension, for illustration .bash => .xbash . by Default: Detect Form Input Detect CORS Missconfiguration Detect X-FRAME-OPTIONS missing (Clickjacking Potential) Detect Reflected XSS via URL Detect Reflected XSS via Form How to Install: git clone https://github.com/zerobyte-id/Bashter.git cd Bashter/ bash setup.bash...